Recognition-Based Retrieval Significantly Enhances Alphanumeric Password Memorability

Area of Science:

• Human-computer interaction
• Cognitive psychology
• Information security

Background:

• Strong system-assigned passwords present memorability challenges.
• Next-generation authentication seeks to improve password memorability.
• Existing research attributes memorability gains to dual-coding or recognition retrieval.

Purpose of the Study:

• Investigate the source of memorability benefits in recognition-based graphical authentication.
• Examine the impact of retrieval type (recall vs. recognition) and font distinctiveness on usability.
• Determine if text distinctiveness and recognition enhance memorability for strong alphanumeric passwords.

Main Methods:

• Participants learned alphanumeric passwords via recall and recognition (Use Your Illusion - UYI) schemes.
• The UYI scheme presented passwords in plain or distinctive fonts.
• Login performance was assessed after 5 minutes and 3 weeks, measuring errors and time.

Main Results:

• Font distinctiveness did not significantly impact memorability.
• Recognition-based UYI significantly outperformed recall for all metrics after 3 weeks.
• Text-based recognition achieved memorability comparable to graphical authentication benchmarks.

Conclusions:

• Retrieval type is the primary driver of authentication memorability.
• Transforming text into images did not enhance memorability, potentially due to a ceiling effect.
• Recognition-based schemes dramatically improve text password memorability, offering practical applications for designers.